Certification levels for DarkBox Security Systems
Based on NIST penetration test standards NIST 800-171, 3.11.2 and 3.11.3.
Tap badges below for more details
Platinum Certified
✯✯✯✯
-
Online Pentest
- Identification and exploitation of vulnerabilities in online platforms.
- Evaluation of server security configurations and weaknesses.
- Testing for data leakage and session management vulnerabilities.
- Network penetration testing for identifying and exploiting vulnerabilities within the network infrastructure.
-
Social Engineering
- Phishing campaigns to gauge employee vulnerability to deceptive emails.
- Vishing (voice phishing) to test staff responses to deceptive calls.
- Impersonation tests to check physical and digital security measures.
- USB baiting to check if employees pick up and plug in random USB devices.
-
Physical Pentest
- Unauthorized access attempts to secure physical locations.
- Testing of access controls like biometrics, key cards, and pin systems.
- Surveillance system vulnerabilities and blind spot identification.
- Physical security checks on servers, workstations, and other critical equipment.
-
Internal Security Audit
- Comprehensive review of internal IT infrastructure.
- Detailed assessment of network configurations, firewalls, and internal defenses.
- Review of employee access levels and data handling practices.
- Regular updates and patches audit.
Gold Certified
✯✯✯
-
Remote Pentest
- External vulnerability scanning and exploitation.
- Evaluation of security measures against remote threats.
- Identifying exposed services, ports, and misconfigurations.
-
Social Engineering
- Phishing campaigns to gauge employee vulnerability to deceptive emails.
- Vishing (voice phishing) to test staff responses to deceptive calls.
- Impersonation tests to check physical and digital security measures.
- USB baiting to check if employees pick up and plug in random USB devices.
-
Internal Security Audit
- Comprehensive review of internal IT infrastructure.
- Detailed assessment of network configurations, firewalls, and internal defenses.
- Review of employee access levels and data handling practices.
- Regular updates and patches audit.
Silver Certified
✯✯
-
Online Pentest (Web Application & Network)
- Identification and exploitation of vulnerabilities in online platforms.
- Evaluation of server security configurations and weaknesses.
- Testing for data leakage and session management vulnerabilities.
- Network penetration testing for identifying and exploiting vulnerabilities within the network infrastructure.
-
Remote Internal Audit
- Evaluation of remote access controls and protocols.
- Testing remote connectivity security and potential vulnerabilities.
- Analysis of remote work setups and associated security configurations.
Bronze Certified
✯
-
Online Pentest (Web Application & Network)
- Identification and exploitation of vulnerabilities in online platforms.
- Evaluation of server security configurations and weaknesses.
- Testing for data leakage and session management vulnerabilities.
- Network penetration testing for identifying and exploiting vulnerabilities within the network infrastructure.
